cultural-tourism-bilibili-feed

Fail

Audited by Gen Agent Trust Hub on Aug 29, 2026

Risk Level: HIGHPERSISTENCECOMMAND_EXECUTION
Full Analysis
  • [PERSISTENCE]: The script scripts/cultural_tourism_bilibili_report.py contains functionality to install persistent scheduled tasks on the host system. It creates a .plist file in the user's ~/Library/LaunchAgents directory and invokes launchctl to load it for recurring background execution on macOS. On Linux systems, it modifies the user's crontab using shell commands to schedule the script to run automatically every day.
  • [COMMAND_EXECUTION]: The skill performs shell command execution using the subprocess module. In scripts/cultural_tourism_bilibili_report.py, subprocess.run is used to manage system services via launchctl and to manipulate the user's crontab via shell redirection. Additionally, it uses subprocess.Popen to launch the default system browser using commands like open or xdg-open to display generated reports.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Aug 29, 2026, 02:38 AM
Security Audit — agent-trust-hub — cultural-tourism-bilibili-feed